Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/L5Ublefnfnz_gofQY52V2qw1Pls.roa
File:                     L5Ublefnfnz_gofQY52V2qw1Pls.roa (raw, json)
Hash identifier:          Si1K+rGXCNFSOMCCgrCNdNy7O2f2HbKt9ag16/wCgdU=
Subject key identifier:   2F:95:1B:95:E7:E7:7E:7C:FF:82:87:D0:63:9D:95:DA:AC:35:3E:5B
Certificate issuer:       /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial:       018967C5EB0556E2B6B10E6F489F01979D60
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/L5Ublefnfnz_gofQY52V2qw1Pls.roa
Signing time:             Tue 18 Jul 2023 06:52:51 +0000
ROA not before:           Tue 18 Jul 2023 06:52:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     174
IP address blocks:        45.151.70.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:67:c5:eb:05:56:e2:b6:b1:0e:6f:48:9f:01:97:9d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
        Validity
            Not Before: Jul 18 06:52:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2f951b95e7e77e7cff8287d0639d95daac353e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7a:32:a9:b1:cf:58:21:8d:d4:56:2b:73:be:
                    50:4e:67:c8:9c:e0:e7:c6:69:5c:00:e6:8d:cc:bf:
                    90:a9:59:d4:fa:8f:cd:25:71:ab:70:d5:ee:61:46:
                    52:da:4a:0c:92:58:0a:13:64:67:34:32:31:5c:2c:
                    13:25:85:8f:3c:a9:92:97:16:b5:b4:a5:93:bb:42:
                    6d:38:77:07:29:dd:5d:bc:9c:47:fb:ba:9d:69:2d:
                    cf:4d:09:5f:a2:ff:ea:2b:6c:8b:14:2e:af:2e:1b:
                    02:89:05:1a:25:e2:16:be:be:61:5a:d4:8c:1c:25:
                    10:35:08:ee:15:c3:9b:28:60:15:e6:9e:02:0f:04:
                    fc:17:42:69:d8:13:e2:7c:73:45:6f:87:10:c2:c3:
                    a2:11:b8:5f:90:f0:ca:82:8f:7f:63:a5:97:fe:f7:
                    98:43:b4:a3:3f:62:b6:56:7b:dd:e6:16:a9:b4:18:
                    69:c2:f4:d2:f6:60:87:15:43:61:4c:69:4b:65:aa:
                    8e:43:41:97:6a:9f:80:53:d6:ef:3d:d5:d8:d0:e2:
                    7d:5c:da:ac:e7:b1:2d:2a:c8:96:e8:bf:2a:77:15:
                    97:76:54:1a:62:95:f8:ae:f5:41:cc:94:7a:51:be:
                    33:41:3f:b1:df:0b:83:6c:d1:16:36:1f:73:27:f3:
                    40:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:95:1B:95:E7:E7:7E:7C:FF:82:87:D0:63:9D:95:DA:AC:35:3E:5B
            X509v3 Authority Key Identifier:
                keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/L5Ublefnfnz_gofQY52V2qw1Pls.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:8f:59:bb:fe:9f:1e:92:c0:ac:4c:01:f0:f4:51:13:d3:51:
         fa:f8:f2:9b:21:db:aa:83:be:bb:73:56:8c:75:0e:6f:90:b1:
         df:68:72:d5:4a:f2:6e:77:95:a5:a6:ee:9f:fe:9d:ff:2d:26:
         12:bc:70:28:52:85:8c:d7:9c:10:d5:21:d2:8a:2f:9d:aa:11:
         16:13:b1:ee:cc:30:d2:ed:8d:d1:2b:79:d2:d5:a9:47:58:f0:
         40:f7:d1:35:b6:88:d4:84:2d:1d:a8:06:64:fd:85:e2:6c:99:
         45:1f:fa:07:89:a3:64:61:3e:d1:21:0a:44:e4:7c:00:4d:37:
         59:44:3a:55:b0:ca:f1:f7:75:2a:bb:dd:c4:cc:1e:c5:b5:ce:
         c0:ce:92:d0:1b:ab:01:9b:ae:35:3e:f9:ab:87:57:9a:2a:fa:
         49:aa:df:54:64:da:b7:cf:cf:1a:be:22:09:58:bf:5a:1d:8f:
         73:aa:47:30:68:6e:e5:57:2b:4d:f9:4f:a1:10:8d:9f:6b:bf:
         22:9f:5b:67:e9:57:4f:e6:31:b5:c3:3f:4f:f1:53:03:94:0a:
         81:bc:85:b8:c3:e2:1c:2d:14:2a:d2:75:3d:32:dd:9f:cb:0f:
         f9:cd:a5:33:25:7d:8a:20:c3:ae:8b:95:ef:6d:a3:fa:ac:25:
         af:36:a6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 08:27:40 2023 by rpki-client on console-ams.rpki-client.org